Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7FBlx5F5cXHDL-VdSJaLwzqc7D4.roa
File: 7FBlx5F5cXHDL-VdSJaLwzqc7D4.roa (raw, json)
Hash identifier: pIHdeBccMJP+INwG2HzV+lic27Eeos5wlANHLS7NRgs=
Subject key identifier: EC:50:65:C7:91:79:71:71:C3:2F:E5:5D:48:96:8B:C3:3A:9C:EC:3E
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBC85B475E031563DB5188B0E3407C
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7FBlx5F5cXHDL-VdSJaLwzqc7D4.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.133.101.0/24 maxlen: 24
5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
37.221.76.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
37.221.79.0/24 maxlen: 24
85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
93.190.10.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
185.254.52.0/24 maxlen: 24
193.17.4.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.17.6.0/24 maxlen: 24
193.17.7.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.77.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c8:5b:47:5e:03:15:63:db:51:88:b0:e3:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec5065c791797171c32fe55d48968bc33a9cec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:33:5a:52:cf:ec:75:a9:69:82:5f:9a:fd:
ac:59:0a:f9:4e:66:e5:40:63:e9:17:e0:3e:59:25:
c8:47:f3:0a:7a:f6:9d:df:bc:75:34:cd:00:6e:b5:
32:de:44:40:97:2d:87:81:9c:a4:5c:14:00:ad:87:
2d:a0:fc:be:07:1c:01:c7:47:c5:1b:94:b3:a3:cf:
60:75:dc:df:04:b6:32:b5:7f:d1:e5:7d:dd:8a:8a:
cd:bc:59:7e:9a:13:84:db:a9:f0:8e:b8:dd:62:55:
6d:3f:e6:15:98:89:c4:c6:2e:fb:6b:4a:26:90:17:
6d:0f:9e:0c:d7:01:c6:7a:d9:ad:b6:47:a4:de:2d:
ce:cf:7c:52:a4:10:ce:6c:4a:6c:ea:88:6d:6b:cf:
84:fa:8f:66:ca:0e:4c:55:2c:d4:6b:40:7b:ce:6f:
97:0c:23:c3:fc:3b:18:a7:48:dc:53:9b:1a:c5:05:
43:a8:64:da:38:e8:bd:63:10:aa:42:88:7f:5f:b0:
b4:61:5f:35:0f:cc:54:27:0a:8a:b5:e3:3c:bb:bc:
53:17:65:41:f5:e1:b6:e7:ae:10:69:6c:88:98:03:
2f:54:ba:1f:50:31:9b:b5:10:15:d6:f0:5f:b4:3a:
d2:b0:b7:bf:7b:88:7c:13:07:e5:21:bd:44:f5:6d:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:65:C7:91:79:71:71:C3:2F:E5:5D:48:96:8B:C3:3A:9C:EC:3E
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/7FBlx5F5cXHDL-VdSJaLwzqc7D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0-5.133.103.255
37.221.76.0/24
37.221.78.0/23
85.235.72.0-85.235.74.255
93.190.8.0/24
93.190.10.0/23
176.96.128.0/24
176.96.130.0/24
185.254.52.0/24
193.17.4.0/22
193.111.76.0/22
217.18.208.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
db:f6:42:f6:76:34:0e:96:39:17:ed:7a:6a:e5:eb:b3:a2:ff:
66:96:ea:23:d5:95:02:90:87:7a:15:47:dc:cf:97:ba:fc:40:
98:cb:19:1a:1e:7c:e9:11:98:16:ec:c8:ac:c6:90:a7:bf:22:
61:09:80:d4:52:83:89:c7:96:b9:a3:96:51:af:ea:fc:80:60:
56:51:ac:2d:05:1a:32:6b:13:0d:c5:f7:5e:bd:cc:60:e4:41:
b4:06:a0:20:8a:9b:7f:44:15:43:76:8e:38:a6:24:d8:7e:20:
e1:28:3c:d1:35:3f:00:4e:78:a8:04:8c:e8:6a:62:bd:9a:5b:
96:b6:8f:df:63:cf:fc:2c:d3:57:c3:1f:c2:60:3a:99:4e:7f:
33:a0:a3:a7:4e:ac:8b:46:df:2c:c7:b6:00:08:56:69:0b:62:
09:a7:da:de:a6:e8:5e:40:83:cd:95:b9:25:1a:53:67:f1:57:
ca:84:27:56:2b:24:41:e0:33:2d:2f:7a:36:a6:26:c6:ae:af:
80:c9:49:e8:28:bf:c5:54:5f:9d:4f:4e:ad:c9:66:30:25:b4:
59:d3:87:b5:1e:5f:02:f3:0d:1d:a3:83:81:c1:4c:ad:95:ab:
7f:72:ba:3d:f8:8a:ba:7c:42:1e:d4:20:48:f1:1e:96:1b:44:
c0:85:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:31:42 2025 by rpki-client